IN THE CLAIMS: 



1 . (Previously Presented) A method for authenticating a first user in a protected network to 
an appHcation shared concurrently with a second user in an unprotected network, said method 
comprising the steps of: 

the first user supplying a userlD and a password to a first server within said protected 
network for authentication for said application, said application residing in a third network 
configured as a buffer between said protected network and said unprotected network; 

said first server determining that said userlD and password are authentic, and in response, 
said first server forwarding to said application an authentication key for said first user and a 
selection by said first user pertaining to said application, said password not being sent fi-om said 
protected network into said third network to access said application; 

said application determining that said key is authentic, and in response, said application 
complying with said selection by said first user; and 

said second user supplying another userlD and another password to said application, said 
application determining that said other userlD and said other password are authentic, and in 
response, said application complying with a selection made by said second user pertaining to said 
application. 
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2. (Previously Presented) A method as set forth in claim 1 wherein said application complies 
with said selection made by said second user without said second user supplying an 
authentication key to said third network. 

3. (Original) A method as set forth in claim 1 wherein said protected network and said third 
network are both controlled by a same entity. 

4. (Previously Presented) A method as set forth in claim 1 wherein said third network is a 
Demilitarized Zone ("DMZ") network and acts as a security buffer for said protected network. 

5. (Original) A method as set forth in claim 1 wherein said unprotected network is an Internet. 

6. (Original) A method as set forth in claim 3 wherein said unprotected network is an hitemet. 

7. (Previously Presented) A method as set forth in claim 1 wherein said selection by said first 
user is a request to said application, and said selection by said second user is a request to said 
application. 

Claims 8-10 (Canceled) 

1 1 . (Previously Presented) A method as set forth in claim 1 wherein said application is an 
electronic meeting application, both said first user and said second user concurrently participate 
in a same meeting, and said first user selects a screen that is concurrently presented to both said 
first user and said second user. 

12. (Original) A method as set forth in claim 1 1 wherein said selection by said first user is a 
selection of an electronic meeting in which to participate. 
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13. (Original) A method as set forth in claim 1 further comprising the step of said application 
sending to said first server said authentication key before the step of said first server forwarding 
to said application said authentication key. 

14. (Original) A method as set forth in claim 1 wherein said authentication key is self 
authenticating based on whether a period during which the key is valid matches a scheduled 
period of use of said appUcation, and whether an IP address of said first user is fi-om said 
protected network. 

Claim 15 (Canceled) 
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1 6. (Previously Presented) An authentication system comprising: 
an application on a first server in a first network; 

a second server in a second, protected network to receive ft'om a first user within said 
second network a userlD and a password for authentication for said application, said second 
server including means for checking authentication of said first user based on said userlD and 
password, and if said first user is authentic, forwarding to said application an authentication key 
for said first user and a selection by said first user pertaining to said application, said password 
not being sent fi-om said protected network into said first network to access said application; and 

said application including means for checking authentication of said key, and if authentic, 
complying with said selection by said first user; and 

a workstation in a third, unprotected network for a second user, said application being 
shared concurrently with said first and second users, said first network configured as a buffer 
between said second, protected network and said third, unprotected network; and wherein 

said application receives fi-om said second user another userlD and another password, and 
includes means for determining that said other userlD and other password are authentic, and in 
response, complying with a selection made by said second user pertaining to said application. 
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1 7. (Previously Presented) A system as set forth in claim 1 6 wherein said application complies 
with said selection made by said second user without said second user supplying an 
authentication key to said first network. 

18. (Original) A system as set forth in claim 16 wherein said first and second servers and said 
first and second networks are all controlled by a same entity. 

19. (Previously Presented) A system as set forth in claim 16 wherein said first network is a 
Demilitarized Zone ("DMZ") network and acts as a security buffer for said protected network. 

20. (Original) A system as set forth in claim 16 wherein said unprotected network is an Internet. 
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2 1 . (Previously Presented) A computer program product for authenticating a first user in a 
protected network to an application shared simultaneously with a second user in an unprotected 
network, and authenticating said second user to said application, said program product 

comprising: 

a computer readable medium; 

first program instructions, for execution on a first server within said protected network, to 
receive from the first user a userlD and a password for authentication for said application, said 
application residing in a third network configured as a security buffer between said protected 
network and said unprotected network; 

second program instructions, for execution on said first server, to check authentication of 
said first user based on said userlD and password, and if said first user is authentic, to forward to 

said application an authentication key for said first user and a selection by said first user 
pertaining to said application, said password not being sent fi-om said protected network into said 
third network to access said application; 

third program instructions in said appUcation to check authentication of said key, and if 
authentic, comply with said selection by said first user; 

fourth program instructions in said application to receive from said second user another 
userlD and another password, determine if said other userlD and other password are authentic, 
and if so, instruct said application to comply with a selection made by said second user pertaining 
to said application; and wherein 

said first, second, third and fourth program instructions are recorded on said medium in 

functional form. 
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22. (Previously Presented) A computer program product as set forth in claim 2 1 wherein said 
application complies with said selection made by said second user without said second user 
supplying an authentication key to said third network. 

23 . (Previously Presented) A method for authenticating a first user of a first computer in a 
protected network to a second computer executing an application, a second user of a third 
computer in an unprotected network and said first user of said first computer concurrently 
sharing said application, said second computer residing in a third network configured as a buffer 
between said protected network and said unprotected network; said method comprising the steps 
of: 

the first computer supplying a userlD and a password of the first user to a fourth 
computer in said protected network for authentication for said application; 

said fourth computer determining that said user ID and password are authentic, and in 
response, forwarding to said second computer an authentication key for said first user, said 
password not being sent from said protected network into said third network to access said 
application; 

said second computer determining that said key is authentic, and in response, complying 
with a selection by said first user pertaining to said application; and 

said third computer supplying another userlD and another password of said second user to 
said second computer, said second computer determining that said other userlD and said other 
password are authentic, and in response, said application complying with a selection made by 
said second user pertaining to said application. 

24. (Previously Presented) A method as set forth in claim 23 wherein said application 
complies with said selection made by said second user without said second user or said third 
computer supplying an authentication key to said second computer or said third network. 
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25. (Previously Presented) A method as set forth in claim 23 wherein said protected network 
and said third network are both controlled by a same entity. 

26. (Previously Presented) A method as set forth in claim 23 wherein said third network acts 
as a security buffer for said protected network. 
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